CVE-2002-0910: Debian Netstd

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to.

Affected products

  • Debian Netstd: version 3.07 only

Published 2002-10-04. Last modified 2026-06-16.